Auto-Update Checksum Verification for Electronic Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for updating electronic devices are vulnerable to malware and security attacks, leading to the potential installation of faulty updates, necessitating a method to verify the integrity and correctness of updates.
Innovation Solution
An auto-update system that establishes a secured connection with a restricted list of certificate authority certificates, verifies the server certificate, and uses checksums to ensure the update is correctly applied by comparing expected and actual installation checksums between source and target partitions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If updates are received from an update server without verification, then the update process is simple and fast, but malware or faulty updates may be installed on the electronic device
Solution Approach 1:
The system performs preliminary verification actions before installing updates by calculating checksums of the update data and comparing them against expected values stored in the update package. This preliminary verification ensures integrity before the actual installation occurs, preventing malware installation while maintaining a straightforward update process.
Solution Approach 2:
The system implements feedback mechanisms where the auto-update module receives verification information from the update server and compares it against locally stored expected checksums. This feedback loop confirms the authenticity of updates without adding significant complexity, as the verification data is pre-packaged with the update itself.
2Object-affected harmful factors
If a restricted list of certificate authority certificates is used, then security against malware is improved, but the ability to receive updates from unknown sources is reduced
Solution Approach 1:
The system pre-establishes a restricted list of trusted certificate authority certificates before any update reception occurs. This preliminary configuration ensures that only updates from known, trusted sources can be installed, providing strong malware protection while maintaining the ability to receive updates from authorized sources through the pre-configured trust framework.
3Measurement precision
If checksum verification is performed on the update, then the correctness of the update installation is verified, but the update process time is increased
Solution Approach 1:
The expected checksums are pre-calculated and packaged with the update data itself, eliminating the need to wait for checksum generation during the update process. The verification is performed by simple comparison operations using pre-available data, achieving high verification accuracy without significant time penalty.
Solution Approach 2:
The update package includes a copy of the expected checksums as verification data, allowing the system to verify integrity through simple comparison rather than complex calculation. This copying of verification data enables fast verification while maintaining high accuracy, as the checksums are already available for direct comparison.
Data Source
AI summary
Systems and methods for verifying an update to data of an electronic device are provided. A system includes an auto-update module configured to receive an update from an update server over a secured connection. The update is applicable to a first version of the data installed on a source partition. The update includes an expected installation checksum associated with applying the update to the first version of the data. The auto-update module is configured to determine an actual installation checksum associated with a second version of the data installed on a target partition. The second version of the data includes the first version of the data with the update applied thereto. The auto-update module is configured to compare the expected installation checksum to the actual installation checksum, and to verify that the installation of the second version of the data was successful based on the comparison.